RisingTerms

Privacy Policy

Effective 29 October 2026

This policy explains what personal data RisingTerms, operated by RisingTerms, China, collects, why, and what rights you have. We keep data collection to the minimum needed to run the Service.

1. Data we collect

  • Account data: email address, a salted password hash (we never store your password), creation date and last login date.
  • Service data: keywords you watch, alert channels you add (for example a Slack or Discord webhook URL or an alert email address), alerts generated for you, your plan and subscription status.
  • Billing data: when you buy a Pro plan, Creem (creem.io) collects your payment details, billing address and tax information directly. We do not receive or store card numbers. We receive the customer and subscription identifiers, the plan purchased, the billing period and the status of the subscription so we can activate and maintain your access.
  • Technical data: our hosting provider (Cloudflare) processes IP addresses, request headers and timing to deliver the website and protect it from abuse. We keep aggregate page-view counts per page per day without storing IP addresses, cookies or device identifiers for analytics.
  • Cookies: one strictly necessary session cookie (rt_session) keeps you logged in. We do not use advertising or cross-site tracking cookies.
  • Support messages: emails you send to our support address, kept as long as needed to resolve your request.

2. Why we process it (legal bases)

  • To provide the Service you signed up for, including alerts and billing (performance of a contract).
  • To secure the Service, prevent abuse and keep aggregate statistics (legitimate interests).
  • To comply with legal obligations such as tax and accounting records held by the merchant of record.
  • With your consent, where we ask for it (for example product announcements by email; you can withdraw at any time).

3. Who receives data

  • Cloudflare, Inc. hosts the website, database and feeds (data may be processed in the United States and in Cloudflare's global network).
  • Creem (creem.io) processes payments, taxes, receipts and refunds as merchant of record under its own privacy policy.
  • Email delivery provider (when email alerts or password resets are enabled) delivers transactional emails on our behalf.
  • Your own alert destinations: when you add a webhook, we send matching alerts to the URL you provided. You control that destination.

We do not sell personal data and do not share it with advertisers.

4. Public source data

The radar itself is built from publicly available posts and launches. We store titles, links, author handles where they are part of the public post, and counts. If you are the author of a public post and want it removed from our index, email us and we will remove it within 7 days.

5. Retention

  • Account and service data: until you delete your account, then removed within 30 days from active systems (backups expire within 90 days).
  • Billing records held by the merchant of record: as required by tax law (typically 7–10 years).
  • Radar data: 120 days rolling window; aggregate page-view counts: 13 months.

6. Your rights

Depending on where you live (including under the GDPR, UK GDPR, the Hong Kong PDPO and US state privacy laws) you may have the right to access, correct, delete, export or restrict the processing of your personal data, to object to processing based on legitimate interests, and to lodge a complaint with a supervisory authority. You can delete your account and export your keywords and alerts yourself from Dashboard → Settings. For any other request, email support@risingterms.com; we respond within 30 days.

7. International transfers

We operate from China and use providers located in the United States and the European Union. Where required, transfers rely on standard contractual clauses or equivalent safeguards offered by those providers.

8. Security

All traffic is encrypted with TLS. Passwords are hashed with PBKDF2-SHA256 and a unique salt. Sessions are stored server-side and expire after 30 days of inactivity. Access to production data is limited to the operator.

9. Children

The Service is not directed to children under 16 and we do not knowingly collect their data.

10. Changes

We will post changes on this page and, for material changes, notify account holders by email before they take effect.

11. Contact

Data controller: RisingTerms, China · support@risingterms.com

Questions about this policy: support@risingterms.com.